Tag
identity
13 entries, including 6 patterns.
- Pattern
Resource-Bound Action Budget
Keep conversation policy for sequencing, but enforce cumulative limits in an atomic resource ledger across sessions and retries.
The budget reset with the conversation
Session-aware tool policy can remember a transfer, but a fresh conversation can forget it. Put durable limits at the resource that moves the money.
- Pattern
Same-User Elicitation Binding
Require the browser principal completing an MCP URL elicitation to match the authenticated principal that initiated it.
The link connected the wrong account
MCP URL elicitation keeps credentials out of the agent, but a copied authorization link can still bind a victim's account to the attacker's session.
- Pattern
External Agent Policy Enforcement
Keep authoritative policy outside the agent's control and require its decision at every consequential service boundary.
The agent edited its own policy
A repository policy file can guide an AI coding agent. It cannot constrain the agent when the same identity can rewrite or bypass it.
Cancelled is not contained
An A2A cancellation request does not prove that delegated work has stopped or that its credentials can no longer act.
- Pattern
Revocable Delegation Boundary
Bound cross-agent authority and verify that revocation reaches delegated execution.
- Pattern
Permission Freshness at Retrieval
Enforce caller access before model context assembly and place an explicit limit on stale permission state.
The index kept the permission
Removing access at the source does not immediately remove it from an AI index, a cached answer or an existing conversation.
A2A without a receipt
An authenticated agent call still needs a record of the policy that allowed it.
- Pattern
Skill Grant on the Hop
Enforce skill-level policy at the receiving agent, then bind a durable authorization receipt to the call before it runs.
MCP access is now an IdP problem
The privilege decision leaves the consent screen and sits in identity policy. The blast radius sits there too.